It seems like Kaspersky blacklisted then whitelisted serious AV Remover Ransomware

[Turkeytm founder]

This malware published on github but it seems like some people going to abuse this stuff again. I wonder why malware whitelisted? Actually Thor did great job detecting before AV's detected ransomware. (Probably due to malware is not fully made in Rust so Thor detected it)

Here is the main payload which still removes Kaspersky. Only his signature added to Kaspersky. 

AntivirusBypass.exe

Ransomware

I don't using Kaspersky. That's not my photo. Someone sended to me this photo.

[harlan4096]

Welcome to Kaspersky Community.

 

Winball501 Decryptor.exe looks a tool to test antivirus, and it can be detected as malware by some av firms.